Join IBM experts for a hands-on workshop tailored for CIOs, solution architects, engineers, and DevOps professionals. The session is organized with the support of MUK Group — IBM’s authorized distributor in Ukraine — and will focus on practical tools to build resilient, efficient, and future-ready digital infrastructures.

Workshop Agenda:

Combining open technologies with ultra-reliability on LinuxOne
Dmytro Rybakov, Lead Solutions Architect, IBM

Ensuring infrastructure availability – how IBM Instana helps you quickly understand what's happening now and what might happen next
Valentyn Shapoval, Lead Software Solutions Architect, IBM

IBM CloudPaks as core tools for digital transformation across any business
Ivan Tukin, Lead Software Solutions Architect, IBM

Your trusted service partner in Ukraine
Valentyn Cherdakli & Vladyslav Avramyshyn, Senior Technical Support Specialists

Opening words from organizers and government officials

A high-level panel discussion featuring representatives of Ukraine’s key national cybersecurity institutions. Together, they will share firsthand insights from operating on the digital frontline of hybrid warfare: how critical infrastructure is protected, how rapid response is coordinated, and what strategic lessons Ukraine offers to the global cybersecurity community.

With the rise of quantum computing and other disruptive technologies, the cybersecurity landscape is entering a new era. In this forward-looking session, Jaya Baloo explores how advances in computing, AI, and communications are challenging today’s security assumptions — and what steps we must take now to stay resilient in the face of tomorrow’s cyber threats.

As cyber threats increasingly target backup infrastructures, organizations must rethink their protection strategies. This session will highlight how a resilient backup environment, combined with advanced threat detection and analysis, becomes a key element of a modern cybersecurity framework.

Russian APT groups have emerged as the main cyber threat to Ukraine — groups such as Sandworm, Gamaredon, APT28, and others linked to Russian intelligence services continue to launch targeted attacks against Ukrainian government agencies, the defense sector, and critical infrastructure.

Cyberattacks on Ukraine's energy infrastructure — Russian hackers have deployed destructive malware, including Industroyer2, aiming to disrupt power grids and automated control systems. These attacks were often coordinated with missile strikes for maximum impact.

Threat intelligence as a key defense tool — continuous monitoring of APT activities, malware analysis, and intelligence sharing with CERT-UA and international partners have been critical in detecting and neutralizing threats.

As businesses adopt hybrid environments that span on-premise systems and multiple clouds, ensuring security without adding complexity becomes critical. This session explores practical approaches to securing hybrid infrastructures — focusing on unified visibility, scalable protection, and simplified management. Learn how to build a strong cloud security posture that meets modern operational demands without overwhelming your team.

As digital services grow increasingly interconnected and critical for business operations, ensuring their comprehensive protection becomes essential. This session will cover key principles and strategies for safeguarding digital platforms against evolving cyber threats. Topics will include securing applications, data, and user interactions through integrated security solutions, with a focus on resilience and risk mitigation.

In today’s digital battlespace, the line between rogue activism and statecraft is vanishing. This session dives into the world of modern hacktivism, from early worms and DDoS to today’s proxy battlefield, where our recent research into ideologically driven cyber actors like BlackJack, Handala Group, Indian Cyber Force, and NoName057(16) details how they wage asymmetric warfare across virtual borders. But are they truly independent? Through real-world examples, we unpack how governments are turning chaos into strategy: funding, shielding, and even impersonating hacktivist groups to strike rivals while maintaining plausible deniability. This session reveals the new face of cyber power—anonymous, agile, and alarmingly effective.

APT groups represent some of the most sophisticated and dangerous cyber adversaries today. This session will break down the typical lifecycle of an APT operation — from initial reconnaissance and infiltration to maintaining persistence and executing strategic objectives. Participants will gain insights into the tactics, techniques, and procedures (TTPs) used by state-sponsored and organized threat actors.

Security is no longer a one-off solution — it must be embedded into every stage of your business operations. This session focuses on integrating cybersecurity and resilience into the full business lifecycle: from strategic planning and product development to day-to-day operations and crisis response. Discover how proactive, built-in security can reduce risks, increase agility, and support long-term growth in an age of constant disruption.

Explore how storage-level security enhances cyber resilience. This session covers NetApp's approach to safeguarding critical data at the SAN level, ensuring availability, integrity, and rapid recovery in the face of cyber threats.

In today’s threat landscape, privileged access remains one of the most targeted assets by cybercriminals. This session will explore how building an effective privileged access management (PAM) strategy becomes a vital part of protecting critical systems, data, and infrastructure. We will discuss real-world examples, common mistakes, and best practices for securing privileged accounts in modern hybrid environments.

Detection engineering has evolved from traditional SIEM alerting to proactive control over attacks in real time. This session will explore how modern techniques — from precise detection rules to automated response — enable cybersecurity teams to not only detect, but also disrupt and neutralize threats at every stage of an attack.

Effective cybersecurity today requires more than isolated efforts — it demands collaboration.

This session dives into the dynamic between offensive (red team) and defensive (blue team) cybersecurity strategies.

Being prepared for the worst is no longer optional. This session explores how robust disaster recovery planning helps organizations ensure operational continuity, minimize data loss, and recover swiftly after cyber incidents. We'll discuss DR as a core layer of cybersecurity resilience in an era of increasing digital risk.

Networking and technical break

In an era where information operations undermine trust in governments, businesses, and technology itself, digital resilience is a strategic imperative. Drawing on the Nordic experience, Carl Piva explores how transparency, data ethics, public-private collaboration, and institutional openness can help build trust in times of crisis. What lessons can Ukraine adopt to counter disinformation, cyber threats, and growing digital distrust?

Modern cybersecurity requires more than just defense — it demands visibility. This session explores how observability and software-driven tools enhance resilience by enabling real-time threat detection, faster response, and proactive system protection.

Ukraine’s cybersecurity teams have faced unprecedented pressure in responding to complex and continuous cyberattacks during wartime. This panel will explore real-world practices of incident response under extreme conditions, strategies for rapid containment, coordination between private and public sectors, and lessons learned that can strengthen resilience globally.

From viral falsehoods to targeted influence campaigns, disinformation is increasingly used as a weapon to undermine economic stability. This session examines how information operations affect investor confidence, brand reputation, and even national markets — and what business leaders, policymakers, and media must do to detect, respond, and build resilience in a truth-challenged environment.

What does it take to grow globally from the epicenter of cyber conflict? Drawing on his experience in building and scaling cybersecurity ventures, Nick Gicinto will share insights on global market opportunities, investment trends, and how Ukraine can lead in a $2 trillion industry.

Renowned cybersecurity expert Bruce Schneier will host an open dialogue with the guests of InfoSec Ukraine. The focus will be on a live discussion and audience Q&A centered around the theme "Integrity as a Key Security Property." Some questions will be collected in advance to help guide the conversation, while others can be asked live during the session. This is a rare opportunity for the Ukrainian audience to engage directly with one of the world’s leading security thinkers.

This session explores software-driven approaches to monitoring the dark web for stolen credentials, data leaks, and emerging threats. Learn how modern cybersecurity tools can provide early warning signals, integrate with SIEM/SOAR systems, and enhance your threat intelligence capabilities

Energy Storage Systems (ESS) are becoming a vital part of modern energy infrastructure. This session explores how industrial-scale ESS contribute to energy reliability, continuity, and resilience — from cybersecurity challenges to physical disruptions.

Ukrainian businesses have faced an unprecedented wave of cyberattacks since the full-scale invasion began — from targeted intrusions to destructive wipers and ransomware.

This panel will discuss the full lifecycle of threat intelligence — from sourcing data on the dark web and closed forums to correlating indicators of compromise (IOCs) in SIEM systems.

Secret Topic

An honest conversation about why eliminating Russian software remains a challenge at both state and commercial levels.

Wrap-Up & Networking